removed roles-assignment and signup page and added CORS stuff