added AUTH header to POST and GET ajax methods