implemented better CORS support for the dt api.  used CORS to implement authentication from UI to dt api (REST)