dev configuration
remove request method for ajax
response message could contain an object
ajax should not be decorated
getTopLevelCategory.do will be allowed without logged in