19/04 - add XHR with cross-domain. work in progress, goes well so far