Add xhr module and permissions