Changed: Always allow access to support files - ajax.php, json.php, etc.