fix(AJAX): fix URL for in-iframe AJAX request