Xhr now using SSL