[backend] src server: use ajax for remote cpio source download