Replaced temporary cross-origin hack with JSONP handling for Simon and Julio, as it turns out that CORS does not work with authentication in any browser.