fix csp problem with ajax calls
Merge branch 'refactor_sidebar'