attempting allow xhr