Removed some random php token hard-coded into the ajax url, replaced with correct var