using jsonp since ff does not like cross port requests