Add header to allow AJAX call