add jsonP support to cross origin request validation