switch link for json in header's XMLHTTPRequest again because of a confused cross-domain issue