Relaxed the content security policy so CommonJS can be used.
Added a popup component to /lib written in CoffeeScript
Added a root component, needs a separate bootstrap file due to Chrome CSP.