Move scripts and stylesheets into out-of-line assets

We currently use inline style sheets and scripts which is simple but also incompatible with some security-related HTTP headers. We should move these style sheets and scripst into separate assets served as static files.