abfdc90 add in the headers expected for an ajax call. Normally not there for a CORS request