remove logging to tmp file, add check for expired admin session to ajax calls