[fix] use CORS cross-domain request to start same session for another host name