open ajax calls to non logged requests and cross site

* check user and password
* need to base64_encode up0 and up1
(for user and password)
* need to base64_encode content also…