http-polling : adding 'X-XSS-Protection : 0;' to headers necessary not only to jsonp-polling but http-polling