added controllers for json-api to act as proxies
to eliminate CORS
Modified the JS to use these calls, need to test elsewhere