GlideAjax done right

The client script needs server data and there are three ways to get it, two of them wrong. The complete client-callable pair, the security angle nobody teaches, and when g_scratchpad is the better answer.