fix cors issue
use cdn files instead