try switching from CORS to xdomain