crossdomain for api server
clean up