allow cross domain content type header