ajax key & user management