check CORS support before useFakeXMLHttpRequest

sinon.useFakeXMLHttpRequest() was being called even when the browser didn't support CORS, this makes sure that sinon.useFakeXDomainRequest() is called if the browser doesn't support CORS