CORS

Report errors by XHR POST, fallback to JSONP GET.