X-Frame-Options and Strict-Transport-Security are prohbiting me from uploading any images via ajax error due to self signed cert (on a dev box)
File under just being a bad morning. 

It turned out to be the ADMIN THEME was using jQuery 1.4 instead of an updated version. Using jQuery Update, the admin theme now has a 1.8 and content creators are happy.