add CORS support and options route, change name to username in params