Encrypted Ajax without SSL