added ajax_headers.php to class_secure; fix for deprecated /e modifier in SM2