xhr now is permitted on localhost
Merge pull request #160 from ChristianMurphy/xhr-hot-fix

xhr now is permitted on localhost