add query string to prevent script tags from caching a response that fails CORS for xhr service requests