fix various and sundry urls
enable trust proxy
use postMessage to tell Canvas to resize iframe