Revert cross-domain access to http headers.

- Does not appear to help w/xhr access issues.