added AuthToken to Ajax request