replaced crossdomain.py with flask CORS