rest API changes: publishing user_id instead of username, get trades since timestamp, and automatically configuring allowed origins