allow cross-domain of getting rebate