// :// api auth config header post sourceMapping token xhr XMLHttpRequest