Added security on ajax request - wrote tests