use XDomainRequest for IE CORS requests