fixing cors, enabling xmpp-ftw endpoint