switching ajax call to included file to get around security concerns in chrome