enable CORS in asset branch, add font's to mime-types