working on first XSS example
some cleanups hre and there