Couple of major bug fixes

* was using the 'unsafe' version of jQuery requests when the default is 'safe
* was NOT loading jQuery by default - expecting the theme to do it