feat($headers): allow custom headers to be sent with form submit

Also fixed some bugs found in #2 impl.
No tests needed for header support as this is entirely delegated to core-ajax.

closes #3