Corrected AJAX and pathnames of username/password