Add extensions to ajax urls to be secure