use plain XMLHttpRequest instead of goog.net.XhrIo