add config.xml. notice access div to allow accessing all domains.