CORS - ensure upload is failed if a valid response is not received after iframe onload