ajax calls for non-root deployed apps