Allow session cookie to be sent over ajax requests