removed cross domain policy rules