move ajax url concatenation to server side