Make `origin` header set only if there is not XHR2 API

`origin` header is considered unsafe in webkit and there is an error
trying to set `origin` header
Merge pull request #148 from chebur/master

Refused to set unsafe header "Origin" fix
Reset onReadyStateChange handler before abort() to avoid success handler invocation on timeout
Merge pull request #149 from pronebird/master

Avoid success handler invocation on timeout
Add support to create iframe with post request.
This method add support to use cookies in iframe for Safari browser.
Add support to create iframe with post request.
This method add support to use cookies in iframe for Safari browser.
Merge branch 'master' of github.com:xawerion/easyXDM
Merge branch 'master' of github.com:xawerion/easyXDM
Add support to create iframe with post request.
This method add support to use cookies in iframe for Safari browser.
Merge branch 'master' of github.com:xawerion/easyXDM
window.XMLHttpRequest fix for IE6
Update src/cors/index.html
bug fix

config.onLoad will be called twice
Merge pull request #166 from j1anb1n/master

Bug Fix: config.onLoad will be called twice
Merge pull request #164 from dzrhythm/master

IE6 fix for cors/index.html
clean previous callback to prevent unnecessary invoke
Merge pull request #169 from j1anb1n/master

clean previous message.callback to prevent unnecessary invoke in ReliableBehaivor
Merge pull request #152 from xawerion/master

Add support to create iframe with post request
Note: will add hop test to the loop after merging.
Minor changes to make the addition compliant.
url should be resolved in switch/case statement rather then detection in case config.protocol is manually specified