modify xhr for IE CORS support