fix crossdomain requests
fix for cross domain, close #11