CORS

added useXDomain flad to config