ajax basic implementation phase 1

next setup secure session and adjust header