A CORS-capable replacement for XHR on IE