Added allowed domains and moved js to start script instead of end script