Hack around cross-domain POSTing