added login check in the controllers
ajax infobox