I think this mostly works...barring CORS crap