removed some white spaces
made CORS work from express