title: Cross domain AJAX results in 403 forbidden
body: <p>We are trying to make cross domain AJAX call via POST. If we directly try to access <code>bbb.com</code> from <code>aaa.com</code> it will ask for credentials. Only after giving credentials will we be able to access <code>bbb.com</code>. Now in the same way, when an AJAX call is made to a different domain, in this case <code>bbb.com</code> I'm receiving a 403 forbidden error.</p>
  
  <p>I tried adding the authorization header and now in the request header, I see the below headers but even after having authorization header I'm still having the issue.</p>
  
  <blockquote>
    <p>Accept text/html,application/xhtml+xml,application/xml;q=0.9,<em>/</em>;q=0.8<br>
    Accept-Encoding gzip, deflate<br>
    Accept-Language en-US,en;q=0.5<br>
    Access-Control-Request-He...    authenticationindicator,authorizationtoken<br>
    Access-Control-Request-Me...    POST<br>
    Authorization   Basic TG9uZG9uOkJiZ0JlbjE4NTk=<br>
    Cache-Control   no-cache<br>
    Host    aaa.com<br>
    Origin  bbb.com<br>
    Pragma  no-cache<br>
    Proxy-Connection    keep-alive<br>
    User-Agent  Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101 Firefox/17.0  </p>
  </blockquote>
  
  <p>Does anyone know how we can solve the 403 forbidden issue?</p>