allow HEAD method on apis
add CORS header
update api doc
Merge branch 'hotfix'
do not round on limit order