make post of layout secure, make layou json on aws bucket=owner-read
using image proxy for cors retrieval and data uri conversion
show image proxy progress and errors