chrome notice
host sha.js and zxcvbn-async.js locally to avoid chrome error