Removed the header setting because the browser automatically sends the Basic Auth info along with subsequent requests already even with ajax requests.
Merge branch 'origin/master'