Introduce security for ajax