move JS in stat page to separate file
combine JS files on stat page into one and upgrade JS libraries
remove no longer needed `js_bottom` template slot
first cut at a CSP policy with some unsafe elements
avoid and disallow inline styles, refs #55