Set AJAX headers to be sure after login.