cross domain request and OPTIONS request handled