allow cross origin ajax + disable yeoman