allow cross domain requests
general case fields