add jquery
allow cors
in config.ru
turn it off right now
skip authenticty token