switched back to using classList.toggle()

this is made possible by including a short javascript shim that adds classList support to browsers that don't support it (i.e. IE 9)
Merge remote-tracking branch 'origin/cybox_to_html2'