enabled CORS on server
bumped npm dependencies