send accept headers even outside of the tabulator extension

this seems to work well, and at least with GET requests, no additional
CORS headers are required on the server side.