move shuffle helper into app.js to save an HTTP request and keep it out of the global scope