players don't get returned as locations
allowed POST and GET over xorigin