allowing crossOrigin parameter

crossOrigin needs to be set before `src`