Fixed cross domain access issue

TODO: actually test that 409 status is caught