make sure AJAX backends are only available for managers