made template url absolute
expect CORS authorization from url server