added a form to the flask API, about to add GET param handling
stock parameter is working
fixing the ajax security issue