Allow canvas3d to use CORS for cross-origin requests

This will still not work for cross-origin requests in IE9