server: load injected scripts async and defer