[BUG #7325] switch sentinel fetching to 'script' transport

- to overcome cross-domain issue when main app is served over separate server