update to openseadragon HEAD
include openseadragon/openseadragon#364 in the vendored openseadragon to fix access to IIIF resources without a cross origin policy in place
Merge pull request #2 from cbeer/cors

Use openseadragon 1.0 with CORS policy patch