Allow in-browser use with CORS. Remove XMLHttpRequest Node dep.