fixed client in 'prod-y' environments
Add ability to log security-related events.
Filter empty strings from the remoteAddressChain
Ensure 'uid' is present on all relevant security events.
sketch of asserting logs in tests
Move log-testing dependencies into devDependencies
Add tests for security-event logging output.
Add comment re: filtering of XFF header.
Merge pull request #453 from mozilla/rfk/security-events

Add ability to log security-related events.
add the OmniGraffle source for the "onepw" protocol diagrams

Recently exported PNG images from this are included in this repo's
related wiki, on this page:

 https://github.com/mozilla/fxa-auth-server/wiki/onepw-protocol
update onepw.graffle: HKDF details, new token names