Use node for dropzone dependencies

How we include dropzone is not great right now, because we have to update it elsewhere and it would be cool if we didn't have to do that. And we have node in the project and it's not leaving anytime soon so I think it doesn't hurt

Also sonarqube whines about not having integrity checks on the sources which is very valid