better check for CORS on IE