Add cross domain auth