Protected controllers from access by unsigned users.
Implemented draft ajax call from user profile page.