cross origin hack for ie11 but probably not ie10