added pass for same domain (AJAX) requests