Add in AJAX security