Improved AJAXInvokeAction to allow whitelisting of accessible methods