Actually add the logic for the iframe endpoint

Ryan may want to use it.