@malcolmsparks: looks like CORS is disabled in 1.0.0-20150816.005601-4 ... will it be re-instated soon ?

no particular rush for CORS... i was developing with it, but i don't have to

Yes, but I was thinking about that this morning on the bus - it's part of the security side which I want to review as a whole - I'm mulling over the best options. I've thought about the option of using Ring middleware (because yada will support that) but I think things that are 'core' should be implemented as part of yada

yada already supports OPTIONS, so CORS pre-flighting will be easy