SECURITY ALERT: Ajax requests can only be issued by javascript clients.