Warnings and cross-domain checking on Data assets.

Adds warning in HTML debug builds when using externalBasePath.
Updated Manifest to allow externalBasePath if using same domain on systems that do not support CORS (Android).
Closes #191