cross origin fix #3