clean some unused variables and send getJson request with credentials
add headers to allow crossdomain