Adds ajax router to handle ajax requests

This router:

* verifies nonces
* verifies correct capabilities

TODO:

* [ ] add better handling of errors