are you doing a cross domain request?