Updated cross domain policy in an attempt to fix IE8 bug