add dynamic_js and dynamic_js to whitelisted paths when we're in
LOCKDOWN mode
Whitelist API and /data/ requests for LOCKDOWN mode.
Merge pull request #2682 from jamalex/lockdown_fixes

Whitelist /api/ and /data/ requests for LOCKDOWN mode.
Merge branch 'wch' into exoskeleton
Add settings flag to disable PDF_JS.
Rather than showing and hiding the sidebar, shift it off the screen to maintain scroll position, and slightly improve performance.
Ensures sidebar in correct state after resize.