deposit: assets cleanup

Changes js import clauses to use url_for