use XDomainRequest with IE9

this adds more support for IE9. I shall deploy it to test and we'll have to test it.
shouldn't break existing browsers (unless they masquerade as ie9)