add cross-browser in header
Merge branch 'oauth_exceptions'