Added content-type to fix issue with Safari XHR CORS