changed cross-origin-sharing location