Added endpoints to all ajax files, only valid session now able to make ajax calls