Adds CORS support

##### Summary

- shifts all requests to use JSON+CORS via xhr instead of jsonp
- also removes caching scaffold

##### TODO

- cross-browser test

cc @bhelx @austinheap @cbarton