do not specify token in GET params, will be set by ajaxHelper in POST