fix: cross-domain issues such as POST, DELETE #12