Removed X-Application headers

When using XHR w/ CORS, any custom header can trigger preflight
requests. Removing this header avoided tons of preflight requests, when
loading from the remoteClient.