using flask-cors for cross origin api permission
prettied up the main page