pin "component/global" to v2.0.1

/cc @shtylman
pin "component/has-cors" to v1.0.1

/cc @shtylman
package: pin "xmlhttprequest" to LearnBoost/node-XMLHttpRequest@0f36d0b5ebc03d85f860d42a64ae9791e1daa433