Fix not sending the username and password in the url over ajax, it's already used in a safer manner with a header request. This fixes Firefox.