Issue #2242751 by David_Rothstein: Implemented #2242663 for SA-CORE-2014-002 (Ajax form page callback security fix for anonymous users).