Merge pull request #2092 from Guite/1.4

Ensure ajax type is set for legacy calls
proposal: added admin permissions to console commands