npm start instead of Procfile
commonform-js from GitHub
explicit CORS domains