now using http-status module for HTTP status codes--more self-documenting
Enable CORS support