changed side bar controller numbers and allow cross domain in headers