json jsonp basic auth and cross domain are all working