tools.js, bypass XHR protocol to download file

Restore old fashion way, but loose ability to rename downloaded file new XHR protocol not working due to cross origin (download html login form)