Move all response code inside completion status check.

Move 'else' that says "Cross-origin error" to the status === 200
check. This means no code runs until the xhr is complete.
Swap two spaces for four space indentation - much more readable =)