bugfix(xhr) add `application/x-www-form-urlencoded` header only to non-FormData POSTs