first working version
improve security in Cropping and Ajax Controller