added CORS support
fix: log file permission change