fix(demo): prevent X-Requested-With header to be sent