Access-Control-Allow-Origin: "http://subdomain.domain.tld"
Access-Control-Allow-Methods: "GET"
Access-Control-Allow-Credentials: "true"
Access-Control-Allow-Headers: "X-Requested-With"
$.ajax
url: kodi.config.user_db
xhrFields: {'withCredentials': true}