modify same origin policy