move to jquery-1.11.1, which fixes the CSP violation

1.11.x moved the generated jquery.js from the top level to
dist/jquery.js, so this also updates the paths in app/scripts/main.js to
match.