CORS-XHR for MSIE