limited cross domain request to UI application host
Merge pull request #8 from gpavey/add_mongoose_validation

limited cross domain request to UI application host