bugfix:  only call ajax 10 times per second, max
cross-browser:  event.clientX/Y works on both Firefox and Chrome, whereas event.x/y only works on chrome