added ajax/CORS (cross-domain) http request function in loader
added spotify player + test