address changes in recent JSHint versions

- be sneaky about assignment to global "app" and "env"
- disable the newly aggressive test for trailing whitespace