make all Javascript sources local, in js/ directory, and specify CSP header; hide all empty readonly form fields; page-level initialization now in init()--for embedded pages, fires only when the page is visible; show chunk labels in (embedded) versions browser