Fix #4: random and use jsonp instead of cors