- update to wabac.js 2.23.4 to make hashing optional, not require wasm - add tests with CSP policy in place