Use a form post instead of xhr to post the draft comments.
This is necessary because we can't xhr with credentials to
allow-origin-*