add cross origin policy to image job and image loader