more work on todo backend, testing ways of doing CORS...