fix crossdomain on management pages