added xdk cors suppor js script calls