allow cross-domain access to logstream