add cors middleware for get requests - closes #17
merge conflicts