fix secure forms ajax bugs