First jab at locations. Hardcoded debug token.
Got locations working. Hopefully ajax endpoint as well.