fix #5 allow-any-origin.appspot.com