Cancan be gone;auth from scratch;client logged in redirects;jquery ajaxsetup headers