Don't block XHR for the file: protocol

Firefox and Safari both natively allow XHR over the file: protocol. Chrome will allow it when the browser is launched with certain command line arguments. If we remove this exception, Montage apps can run from the filesystem without needing a server.