improve securiry for Ajax interface