Added CORS. Fixed iframe and site usage