move error message formatting to the view
configurable layout publishing url
added cors headers for https posts
added target=_blank