Added security changes and an output type

Changed the strings that hold the JSAPI to final since this SDK will run
on mobile devices.  Also created MD5 hashes from the JSAPI strings to
verify that no third party applications have tampered with the contents.

Also added webviewer as an output type.  Tested the JSAPI that is
produced, works in Chrome, haven't tested other browsers.