Use plain XMLHttpRequest2

It's too much of a pain to get closurebuild working so we can
use goog.* libs.
Export lots more symbols

This is getting really annoying to do manually.