added initial ajax
added auth filter