update routes to allow Ajax call to Widget.sort (POST)