ajax call secured; core controller improved; template function implemented;