use webjars-locator

and eliminate webjars.sbt for now. some form of it might come back
later as part of support for V8-based testing and/or browser-based
testing

for gory details, see discussion on HipChat today