Securing image display, AJAX dynamic typesearch for logged users, content negotiation