PEP update, standardizing return messages, more CORS/Angular compliance