XHR support + doc improvement

* Cleared up some documentation confusion: I was confused as to install the env first and then checkout the repo, or the other way round. Changing the documentation to make this clearer.

* Added cross domain module to allow javascript apis to connect from certain allowed domains.