solution to cross domain ajax restriction problem