Emit log message when we detect ajax calls on endpoints intended for top window

[brockallen]

sniff the incoming headers for ajax calls to let devs know the endpoint should be accessed by the browser window itself (e.g. login, logout)