User Profile

This was trickier to solve than I expected, so make sure: you host from an https address your gesture to ask for permission should be directly triggered by a 'click' or a 'touchend' (not a 'touchstart'; I wasted so much time ignoring this detail) I hope that helps somebody else.