added access-control-allow-origin to response; added htmlcode to main response;