added info about cross domain requests