fix broken unauthenticated calls for $_external handler methods
For all other handler methods, ajax.php does checking for the session key later on