added cors settings and changed file permissions