added github.com to allowed cross-request domains