Fix request headers in AJAX.
Allow client override AJAX headers.
sh.st

Fix for server-side restriction.