switched from superagent to XMLHTTPRequest