Only allow ajax requests to the data