Major fix

- Handling 201s properly from `client.response()` by looking for the `Location` header or a URI in the `response.responseText` & making a subsequent `GET` to it which then resolves the original XHR request
- Updating `data.del()` & `data.set()` to allow CORS requests to be resolved by the server (headers might not always be available)