Crossdomain ajax with auth not possible atm.

Comments added to suggest a 'token'-ized solution.
Please turn off remote server's auth if need to fetch data from another
server.
Next:
Moving on to get login.html into theme or app modules.