can't fix cross origin bug, moved to cdn