[ios] Disable CORS for cordova-whitelisted URLs

This isn't perfect -- really we should be using CORS for all non-whitelisted
URLs, but instead, non-whitelisted requests are simply blocked.
[ios] Switch to static mapping for getting CORS whitelist
Manually map cordova's navigator object onto background window