Fix some templates, notably "JS Chrome app (using Polymer)"

@devoncarew: just a nominal review, there is not much actual app code that's changed.

I'll submit a follow-up PR, which will add a warning to run the CSP Fixer after creating a "JS Chrome app (using Polymer)" and finally move it from under a flag.