Clarify comments and remove unnecessary method invocation

Clarify comments about what breaks in Firefox and the necessary workaround.
Remove unnecessary setting of withCredentials on the ajax request, which is not needed when the Authorization is set explicitly.