added @crossdomain annotation to session