Rename server.js to index.js, and use CORS headers