added cors

fleshed out widget
git test