allow app to be embeded into another website via iframe