Add limit and projection to the GET query. Tweak CORS module.