ajaxing form as a base for the info-jacking
added xhr punch to steal info
structure