setup for heroku
update requirements.txt
add CORS handling