api tester page added, CORs allowed