Change ajax url to prevent CORS