Ajax Restriction

Added a controller filter to prevent some actions from being called
without ajax.