Adds ajax router to handle ajax requests

This router:

* verifies nonces
* verifies correct capabilities

TODO:

* [x] add better handling of errors