Remove X-Requested-With

There is no API to “undo” setting request headers on XHR so it really should be up to the client to specify this (or any other) header.