try to permit cross domain access