basic implementation of CORS to access localStorage items set by another domain