updated humans and crossdomain policy