another cross-origin fix