avoid origin policy issue