also check for cshmi iframe locally, closes #32