got CORS message when loading series now that I'm using a custom domain on heroku, so changed access control header