Create MVC attribute to restrict non-AJAX call to the endpoint.

[More]