project structure  refactored to serve from flask instead of independently, thus eliminating need to worry about Access-Control-Allow-Origin stuff. Thanks to @thequbit for guidance.