added cors-bundle to handle CORS
fixed small config errors