Add support for CORS / XHR

This is ready to be looked over now.
I think there should be a check here for support of XMLHttpRequest e.g.

```javascript
if (typeof window.XMLHttpRequest === 'undefined') {
  requestWithJSONP( /** args */);
}
```

This will guard against the object not supported in browsers i.e. IE6.