caching cso-status for 5 min for more reliable responses, added cross-origin api support