removed cross-origin policy blocking