preventing auth for api consumption
skip auth token just for api
adding cors gem from cross domain resource sharing
eliminating dumb cors gem
adding headers for cors
whitespace
adding prefs for sub api