We were not allowing scripts to be run in iframe. fixed.
Also added our newer (and better) "no iframe preview" message as our default message in the iframe element in case nothing gets loaded.

fixes #237