added header to allow cross-site request
fixed fill-in bugs
added pie chart and header/ip checker