ajax demo, datasource security