adding xdreceiver
fixing CORS stuff, fixes #2