adding crossdomain.xml route

it's an ugly patch, i should have created a new function in libs/responses.js feel free to refuse the pull request and make your own (eventually)