Access token and Same origin policy fix