moving js deps to cdn