use JSONP without sending a referrer to the api