upgraded to xdomain 0.6, fixed cors origin