AJAX calls have special http header values. PL IDP needs to ignore these requests and not subject them to authentication processes.