AJAX friendly responses for Security class

Some work around issue #1802:
https://github.com/silverstripe/sapphire/issues/1802