all cross domain requests are eliminated