added CORS stuff
added more CORS stuff
added even more CORS stuff
changed all http responses to 200 status