added attribute which will allow x-domain origin