adding sha2loader; a nifty rehash of the cors-cdn stuff
Merge remote-tracking branch 'origin/master'