Web-app: disable ajax for authentication