Updated session interceptor to not store ticket in session. Also added secured to request mapping for profile. Added ajax setup to always include ticket if available.