fix js2ls in new version atom with CSP-enabled

* use denpendency to handle js2coffee
* use loophole