No CryptoJS

Moving from CryptoJS to forge for AES. This turned out to be a bit more complicated because the forge AES API sucks compared the CryptoJS. 

fixes #80