How is the js delivered to the client-side and how do you ensure that the server has not tampered it?