fix: xhr requests now auto-serialize by contenttype