Allowed cross-domain pages earlier in the app. Also added a global "failed" handler.
Trying different things to get downloads to actually work.