Initial version with transports
Remove header
Now support iframe with postMessage as a transport which does not support CORS  withCredentials
Merge branch 'staging' of github.com:Velaport/widgets-whosin

Conflicts:
	js/xhr.js
Merge pull request #8 from Velaport/iframe-postmessage

Iframe postmessage