Merge pull request #4 from krischer/master

XPath expressions can now handle namespaces
Allow cross origin requests.

Correctly respond to OPTIONS requests to allow cross origin
XMLHttpRequests. This should not affect security as authentication still
works as before.
Handle "multipart/form-data" content types.