Auth security, basic ajax, profile page