fixes to ajax scripts and removing config.php from source control
various fixes
adding sandbox support