fix cross domain issue