(feat) use XMLHttpRequest timeout and remove timers