allow diff origin access of single widget route
embed dashboard in iframe. TODO: see why frames are too tall