removed cross domain policy