Joe #35 ajax header to allow remote connections