cross-domain requests working

+ changes to the input form