Removed X-Requested-With to stop cross domain issues

When working with Cross domain enabled services often X-Requested-With isn't added to the allowed headers and Chrome will throw an error.

I've removed the offending line but I don't know why it was added in the first place.