load the cors support function in wrong place

which make it not work with grease monkey script on other website.
actually I don't think the cors will do anything...