Internalize es5-shim and json3

We are trying to avoid loading external scripts as much as possible, as
doing so opens us up to security risks if one of the servers or CDNs
that we are loading resources from is compromised.