REST API cross domain requests using JSON-P