Modified security and HTML 5 routing

crossdomain.xml

<!-- Read this: www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html -->
<!-- Most restrictive policy: -->
<!--
	<site-control permitted-cross-domain-policies="none"/>
-->
	
	
<!-- Least restrictive policy: -->
<!--
	<site-control permitted-cross-domain-policies="all"/>
	<allow-access-from domain="*" to-ports="*" secure="false"/>
	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
-->
<!--
  If you host a crossdomain.xml file with allow-access-from domain="*" 	 	

scripts/app.js

angular.module("hexmeh", [])
    .config(["$routeProvider", "$locationProvider", function ($routeProvider, $locationProvider) {
        //$locationProvider.html5Mode(true);
        $locationProvider.html5Mode(true);
        
        $routeProvider.when("/", {
            controller: MainController,