remove corss domain setting