fix one more secure forms ajax bug