fix someone's mistake on where to put the xdomain request - needed for old browsers not modern!