Disable the X-Requested-With header to avoid preflighting remote POST requests. Fixes...