Add a crossdomain.xml for security