setRequestHeader can XMLHttpRequest after OPENing a connection