Close #51

* added corsheaders middleware to work properly
* fixed bug when updating a timeslot
* after updating a timeslot, its repetition will be returned if there's one
* included field 'ppoi' in shows

See #22 #23