add xmlhttprequest to package.json