introduced custom Action and included CORS + CACHE wrappers
added controller specs (only working with activated onStart routine)