making progress, running into Access-Control-Allow-Origin issue