test localhost allow
fix cors headers
add OPTIONS handler
add dummy spot endpoint
clear index