shallow clone ajax response

for consideration.  this came up in profiling, not a dominator but does add up with all the requests.  perhaps the deep clone here was to protect the original response data.