little code cleanup to make jshint happy
#bug fix v1.0.3# Having both the request header and passing the credentials to .open causes problems.  Let's just use the request header.