change to JS ajax implementation

Also, make favorite locations available to all users,
not just admins.