cross origin test for all origins