added CORS headers
removed commented code