I'd love to be able to use directly `xhr.getResponseHeader("Location")` here but somehow the cross-domain policy prevent this(?)