add cors support and seed data for api test