allowd json_data action without login also