Added .js format
removed rack cors gem and protect from forgety method