Update pegasus.js

XHR should be passed to CB, not to JSON which ignores it.