modify webservice to allow calls from other domains