CORS and Response formatting

Using xhr directly instead of wpcom-proxy-request.

Will need to configure with app ID.