fix($http): remove 'X-Requested-With' from header defaults

X-Requested-With header is rarely used in practice and by using
it all the time we are triggering preflight checks for crossdomain
requests.

We could try detecting if we are doing CORS requests or not, but
it doesn't look like it's worth the trouble.

BREAKING CHANGE: X-Requested-With header is not set by $http service
any more. If anyone actually uses this header it's quite easy to add
it back via:

```
myAppModule.config(['$httpProvider', function($httpProvider) {
    $httpProvider.defaults.headers.common["X-Requested-With"] = 'XMLHttpRequest';
}]);
```

Closes #1004
fix($http): only set X-XSFR-TOKEN header for same-domain request

This is needed to prevent CORS preflight checks. The XSFR token
is quite useless for CORS requests anyway.

BREAKING CHANGE: X-XSFR-TOKEN is no longer send for cross domain
requests. This shouldn't affect any known production service.

Closes #1096
docs(CHANGELOG): release notes for 1.0.3 and 1.1.1 releases
chore(release): cutting the 1.1.1 pathological-kerning release
chore(release): start 1.1.2 tofu-animation iteration
feat($resource): allow dynamic default parameters

Default resource params can now be calculated at runtime if defined
via a function.
docs(menu): fix the navbar drop down links
fix(docs): add missing </div> tag to sourceEdit directive template
docs(directive): correct expression, fix typo and re-wrap lines
fix(Scope): ensure that a scope is destroyed only once

Due to bd524fc4 calling $destroy() on a scope mupltiple times cases NPE.

Closes #1627
refactor($resource): fix indentation and move a method definition

Moved Resource.bind out of the actions forEach
fix($resource): HTTP method should be case-insensitive

Perform call `angular.uppercase` on all given action methods.

Closes #1403
fix($injector): provider can now be defined in the array format

`injector.instantiate` is now called for arrays too, instead of only for functions.

Closes #1452
feat(e2eRunner): fail when an option to select does not exist
fix(select): support optgroup + select[multiple] combo

Closes #1553
chore(bootstrap-prettify): update urls to code.angularjs.org

Closes #1599
docs(mocks): fix documentation bug: angular.mock.debug
docs(mocks): update src/ngMock/angular-mocks.js documentation

Clarify how to use `$exceptionHandlerProvider.mode('log')` in tests
docs($http): fix link typo in $http doc

Should be $httpBackend instead of $httpBacked

Closes #1516
doc(concepts): Fix typo in $render() function