Fixed hardcoded port (3000) for JS injection

This will fix the combination of port tunneling (with ngrok) and
browser-sync’s live update mechanism