Not sure if it block ajax... see
http://stackoverflow.com/questions/3258645/pass-request-headers-in-a-jquery-ajax-get-call