Express middleware to accept only AJAX requests