Changed profile calls in Admin Console JS to call profile through Admin Console's own controllers and thus avoid exposing the Access Token ID.