remove binding.pry
set up CORS to allow request from 127.0.0.1:9000