allow cross-domain query to jit.php and search.php