added cors support, all is open now
js-url