fix for jsonp and CORS