Remove X-Requested-With HTTP header from defaults

This header prevents Javascript requests to other domains (e.g. https://www.googleapis.com)
Fixes #1