Add security and wrap in js module pattern

Remove default proxy for security, reveal korzConfig to window for user-defined router url, and wrap in simple js module definition. User must define router before making any cross-domain requests:

```
korzConfig.router = "http://example.org/";
```

I would also suggest not catching the errors and letting the browser actually throw real errors for debugging's sake.