bumb and map

- some angular 1.3.5 have been bumped to 1.3.6
- map sources removed
comeon' Google :)
:)
HTML5 cache

- manifest added
- credentials removed and replaced by ALL-CAPS

PS:
last push to Heroku will have all new credentials, including cookie
signature