Vendor bootstrap/lumen & fonts for now
Remove bootswatch from CSP
Vendor bootstrap js and remove from CSP