fixed location for zxcvbn.js