anti same origin policy so that u can make cross domain ajax call