removed cors module in favour of stick's cors middleware
added gravatar hash to JSON representation