some kinda progress
think I"m close here...
almost there with the cors header stuff