ajax session validation fixes