Allow cors for client/api communication
Don't find album art if no track supplied