add support for CORS
model enhanced - parent TodoList class added