Update attributes.js

fix ajax_create, so now even if the site not on the root, the ajax_create attribute creation works fine