Allow operations on XMLHttpRequest before send()

In many case, and in mine with Django for CSRF protection, the upload add-on needs to expose the XMLHttpRequest object.
There's others solutions (such as create a dictionnary in settings) but they are much more complex (and possibly more buggy) to implement.