Commenting with Docblocks, moved json.php and save.php into _inc as added security - json.php and save.php exist in templates acting as wrappers