Supporting IE's XDomainRequest CORS requests