unprotected show
got js to load
fixed a million things to start testing script frontend
enabled iframes