fix ajax permissions for socket