Cors

cors is now in place, also added an ajax prefilter for base url on front
end and a working model.