add headers with authentication for every ajax request