added ajax/sosp/cors/csrf to the index