ajax paths must pass through append_sid