Use withCredentials=false and xdomain could be removed

[wolframkriesing]

like here https://github.com/wolframkriesing/es6-react-workshop/blob/master/src/_external-deps/http-get.js#L7

[shinenelson]

is this a "good first bug"?

as I see, one has to replace the usage of atomic with the node built-ins - http and url as is used in the linked file.

I know many things will probably break in its wake ( I hope there are tests to catch them ).

if that can be done successfully, can we remove atomicjs as a dependency and the use of the xdomain script in index.html?

is that all there is to get this done?