Replace Vary header with explicit xhr=1 param

IE10 doesn't respect the Vary header.