use `jsonp` in favor of `XDomainRequest` to preserve `Cookie` headers in all situations [3rd-eden] (fixes #217)