* Add iframe allow to initial load
Chrome seems to balk at this attribute being added after the fact. It
may be a race condition or an intentional block, but adding to the
template fixes our missing allow attribute problem.
* Update jslib
- more semantically accurate, will expose these as buttons to assistive technologies
- note: while having block-level elements like `<div>` inside a `<button>` is an html validation error, it does not affect functionality as long as there's no more structure inside it