Fixes #8423. Never set X-Requested-With header automagically for cross-domain requests.