added administrator access argument to /ajax