Remove same origin header for now, it breaks login.