Use underscore's clone function, and properly handle xml responses

`JSON.stringify` fails you give it an object that has circular references (which can happen with the 'photo' param).