adding spike for doing a cross-origin request through an iframe