changed the ajax requests to be asynchronous to work with FF and xhr:withCredentials:true