added restriction for ajax url
Merge branch 'dev' into servlet2