use XMLHttpRequest instead of GM_xmlHttpRequest