local vendor scripts, at last
initial passport, google auth