fixed ie using cached room resources without requesting

moved cors middleware to routes/utils.js
added users route to count all users