Fix cross domain security problem by using github pages to host