Allow AJAX posts from the UI