Revert session based calls to $.ajax, fix login/logout/signup