JavaScript hard-codes URLs
While working on #126 (closed) I noticed that several URLs are hard-coded in JavaScript. Unfortunately, I didn't notice this during code review. URLs are not guaranteed to be stable. In Django, there is only one location that defines the URLs.
Please get rid of the hard-coded URLs and ensure the proper mechanisms are used.