change URL to accept Cross Origin requests