added ajax security