I think that using Sinon for testing POST requests, custom headers, etc. is OK, as long as we also use the built-in XHR for doing simple `GET` requests as a sanity check. The current problem was that the test was also using `mout/queryString/encode` to verify the data, so the `?` character was added there as well.