CORS support for IE + timeout for IE