supported is now static w/ a darty name; _inject() now checks if the js script is loaded by trying to poll the support

this means applications can now include webview.js in their html to
avoid the asynchronous loading.