move html out to its own file, add global allowed to npm test