Add a good example of script-nonce to README
rip out the remaining UA-specific code (and brwsr)