For maximum browser compatibility when it comes to sending & receiving cookies, always supply the credentials: 'same-origin' option instead of relying on the default. 1072. jQuery AJAX submit form. Only after before send applayed must be able to access it pages in /secure paths