allow x-domain and return plain text