TBL hits the nail on the head again CORS is a massive and crippling restriction and needs to be overcome. Signing packaged js apps is one method perhaps - but whatever we do we need to over ome the app store gatekeeper somehow.