some feed things, disable cors for dev