Added more permissions to indexing ajax, now also only works if logged in