add simple ajax endpoint

NOTE: CSRF protection has been disabled
Add mockup