Adding comment about needed ajax security.