Initial session system, AJAX user data functionality, Slim forbidden