Added XMLHttpRequest transport, decomissioned JSONP transport, removed API key from query string