fragments and ajax authentication