Force issuer and use loggedInUser (bug 850084)

Declaring the logged in user is necessary for proper auto-signin.
add in some statsd timings (bug 866942)
bump curling (bug master)
Merge pull request #117 from kumar303/re-force-issuer

Force issuer and use loggedInUser (bug 850084)
Improved JS pin validation (864703, 865661)