Add CORS Header, fix bug

Signed-off-by: Lee <jessy1092@gmail.com>