added security-rules.json and made e2e tests executable
removed cdn script tags in favor of local copies for offline local dev