ajax calls should not include www-authenticate header

This fixes httplib2 / bulbs in talking to the rexster endpoint