FIX: Tell the request we're anonymous for CORS purposes

I added CORS to our ico files to allow for cross domain usage (I develop on localhost and our ico is on our production server). However, I was still getting security errors until I added this `crossDomain` attribute.

I got the tip from:
http://stackoverflow.com/questions/20062076/webgl-cors-an-attempt-was-made-to-break-through-the-security-policy-of-the-user

When I use this, the errors go away!