feat: set ACAO header to allow all
test: add json serialization tests
fix: provide unixtime via rest