added cross domain permission for the search