slightly hardened

• make sure pkglocate is run with --. No security hole per se, but flooding the logs if asked for file -bd
• update jquery.js not sure the site can truly be used for xss, but this should shut up the github bot