added CORS and increased max payload size