enable cross-origin images (at the cost of more WebRequests)