I was so pleased with myself for figuring out all that CORS nonsense. Then I realized that none of it would work with IE8 and IE9.

Being unable to use cookies and custom headers is an absolute dealbreaker for this project. So, no CORS for us.

---