Readd "Add X-Requested-With param" so middleware can detect iframe

Was removed in commit e3d1258a269c0199679013a23cc6f28e61448ac5