fix Cross-Origin request error - added res/xml/cordova.xml whitelist