Deleted X-Requested-With header for allow CORS requests.