Fixing CORS headers (authorisation not authentication you pillock!)
Firefox needs the headers sent with every request and so it shall be