remove SHA1 lib from repo

there is bower library to use it instead copy-pasted, so we need to
replace current with bower install.

now we shouldn't keep `lib/` either.