update to has-cors 1.0.3

Fixes graceful fallback if XMLHttp request is disabled in IE
Merge pull request #241 from defunctzombie/fix/disabled-xml

update to has-cors 1.0.3