New: Add ajax headers to cross-domain requests