set headers on AJAX call