Set crossDomain to true so requestCurrentUserSession is always jsonp.
3.5.2