server xhrpolling add allow origin