adding check to see if XHR is actually supported in case browser web security is turned off