directly export the XMLHttpRequest constructor

Still exported as `XMLHttpRequest` property as well for backwards-compat