fixed typo in XHR
api url
removed inline event bindings