A minimal, dependency-free cross-browser CORS HTTP client