Switch to xdomain.js for CORS