todo comment on ajax permissions
Merge branch 'master' of github.com:reallocate/reallocate