Securing Ajax Applications