Patch Snap.ajax to allow CORS GET requests

Adding the "X-Requested-With" header causes CORS requests to fail. Can we only send it with POST requests?