Working cross domain, failing scrollspy hack