server: HTTP status 500 if file location cross origin