use cross domain token to authenticate subscription
add cross domain login to subscription controller