removing the whole no-cross-domain requests stuff