title: Authorization when using plupload to upload images with Breeze
body: <p>I'm using plupload in my Breeze/Durandal application to upload photos. </p>
  
  <p>As part of configuring plupload in a given viewmodel, I set its <code>url</code> configuration property to point to an action on a Web API controller that is decorated with <code>BreezeController</code> and <code>Authorize</code>.</p>
  
  <p>Examining the network trace in the browser developer tools, I see that the user's authorization info doesn't make it into the request. This actually makes sense, because the ajax isn't happening within breeze. </p>
  
  <p>Any thoughts on how to properly secure this call to upload the image? I'd like access to the authenticated user id, otherwise I would have just let it be anonymous. </p>
  
  <p>Thank you!</p>
  
  <p><strong>UPDATE:</strong> There's a headers option which allows you to set the request headers. Missed this when I was going through the documentation initially.</p>