fix xhr authentication issue.