Moved AJAX validation to set JSON headers from construct into initialize
Added Aura Session to handle sessions and CSRF tokens
Fixed some docblock comments
Added Destruct function to add json headers on json output
Shortened Handler exception name
Removed limitation for json headers only on ajax requests