XMLHttpRequest bypassing Auth component

this has been posted before by someone else but there was no answer
http://groups.google.com/group/cake-php/browse_thread/thread/9b15f3038a95cd30/a80797d08a1b5517?lnk=gst&q=auth&pli=1

basically the auth component works fine if i browse to the json page
using my browser but if it uses the xmlhttprequest post it doesnt seem
to be a requirement that i am logged in?
is this the correct behaviour. how do i change it?

Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions.

You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en