Use a profile id for profile GET in js.
Use the pretty version of webapp_root to avoid cross-domain issues.
Throw up an alert if you try to create profile using IE