added devnotes
replaced x-origin header with smarter origin detection by common.dispatchRequest