added bower and moved all possible frontend dependencies there. pain in the ass, but necessary bc npm doesn't have angular-csp