fixed ajax requests and changed api controller security
Merge pull request #1 from bluehawk27/ajax_requests

fixed ajax requests and changed api controller security