Remove an information disclosure hole

Listing all the files available to browse to means that a potential
attacker would have an easier time finding his intended target (e.g.
addstudents.php) than he otherwise would, not to mention it's
unnecessary since there's an error callback for jQuery.ajax which means
we can deal with 404s that way.