cleaned up some comments, updated config to only allow ajax for POST route
cleaned up some comments, updated config to only allow ajax for POST route

mmazanec22/whistlblowr,mmazanec22/whistlblowr,mmazanec22/whistlblowr