fixes cross-domain ajax