authentication + ajax seats request