Trying to figure out why HTML is coming through on the response.data -- removed redirect from the profile_controllers.js to test if that's the source (and thus that the authentication check is malfunctioning as well)