Add mustBeAjax() function for routes + Add some security to Contact