Authorize and XHR transport bugs fixed