token.key should be a Buffer, but stored as hex

token.key is used by Hawk as the HMAC key. If its
a Buffer, it uses those bytes, if its a string Hawk
converts the it to a Buffer with UTF8 encoding. We
want Hawk to use the "raw" bytes. This was discovered
in #114
update bundled version
Merge pull request #114 from dannycoates/hawkKey

Clarify splitting {session,keyFetch}Token into id and reqHMACKey
add high-level login call to client
Merge pull request #135 from mozilla/client_login

add high-level login call to client
began implementing /password/forgot
WIP on forgot password tests
Merge remote-tracking branch 'idp/master' into merge-client-login
update client lib
Adding watch and a simple tap runner to the Gruntfile
implemented client side of forgot password

added a verification test of the forgot/reset flow
added verification test for bad forgot password flow

updated error responses to more closely match api.md
Merge pull request #122 from dannycoates/forgot

Implement forgot password flow
changed error responses to include and errno
Merge pull request #139 from dannycoates/errno

Error response format change
update convict and fix smtp param settings
Merge pull request #141 from zaach/smtp_config

update convict and fix smtp param settings
fix srp tests, bad mailer function
Merge pull request #142 from dannycoates/master

fix srp tests, bad mailer function
fixed api.md for /auth/start response