Sinon overrides `XMLHttpRequest` itself, along with everything descending from it -- jQuery's ajax method, Backbone's persistence (although we don't use it yet), etc.