Update select2.js

Replaced onclick attribute with an event handler. This seems to allow select2 to execute under a Content Security Policy (CSP) which prohibits inline scripts.