fix cross domain request