This is a bad idea. I think we should pin this to 2.5.0. Using latest is 3.x and complains about a few API changes.

2.5.0 is what browserid is on.