deactivate actions; change namespace from /api/v1 to /v1
enable CORS on all routes