fixed more corss domain issues