Security and AJAX fixed