session_filter.js for crossdomain.