added some more cross domain headers