added API doc for our widgets/ endpoint

also: updated the example (typo) widgets so they work on a cors-enabled server