add xhr, promise dependencies to package.json