Searchable drop down menu?

I was able to use the Net.HTTP and SOAP object to access the same DMTI service, but it worked only on the console window:

var jData;
var prm = 
{cVerb:"GET",
 aHeaders: [{name: "Authorization", value:"authentication-token"}],
 cURL: "https://app2.dmtispatialxxx.com/servicesxxx/rest/suggest?limit=60&includePostalCode=true&address=20%20crown%20ste",
 oHandler: {
   response: function (msg, uri, e) {
    console.println("\nThis is the response method:");
    console.println("msg=" + msg);
    //for (var p in msg) {
    //  console.println("p=" + p);
    //  console.println("msg[p]=" + msg[p]);
    //}
    var data = SOAP.stringFromStream(msg);
    jData = JSON.parse(data);
    console.println("Length of json data: " + jData.length);
    console.println("data=" + data);
    console.println("e=" + e);
   }
 }
};
Net.HTTP.request(prm);

Response from the console window:

This is the response method:
msg=[object Stream]
Length of json data: 5
data=[{"matchCount":1,"suggestion":"20 CROWN STEEL DR MARKHAM ON L3R9X9","aliasSuggest":null},{"matchCount":1,"suggestion":"20 CROWN ST QUINTE WEST ON K8V1N6","aliasSuggest":null},{"matchCount":1,"suggestion":"20 CROWN ST ST. CATHARINES ON L2M3L3","aliasSuggest":null},{"matchCount":1,"suggestion":"20 CROWN ST THUNDER BAY ON P7B3J6","aliasSuggest":null},{"matchCount":1,"suggestion":"20 RUE CROWN DANVILLE QC J0A1A0","aliasSuggest":null}]
e=undefined

Unfortunately, the above method didn't work from a the click event of a button (in Adobe LiveCycle form). I got this error:

NotAllowedError: Security settings prevent access to this property or method.

Net.HTTP.request:19:XFA:form1[0]:subform[2]:Button4[0]:click

It looks like the only option now is to develop a wrapper component that can be invoked using the simple URL and to include the authentication token in the query parameters. Also, there is another problem... I have to get authentication code every time it is expired. Currently, there is Java code responsible for this part.

Question:

Why not develop a simple javascript program that can be invoked using HTML or jsp code, and return the result by clearing the output and just dump the result from the xhr response object? While I can develop the server component, but it seems a lot more easier to develop such component using only HTML and javascript. But, I am not  sure if it can be done, I just think it is possible.