remove binding.pry
set up CORS to allow request from 127.0.0.1:9000
Fix cors and added authentication header