set usePolicyFile to true for cross domain swf