used as a transfer station for client side ajax request to server which not allowed by Access-Control-Origin