Express middleware for only accept AJAX request for a given URL