adds php proxy to bypass the allowed-origin policy; demo now working