lock cf dep to a sha for now
fix watch-log component logging spec
add factory_girl dev dependency
dea-ads: fix display when no apps advertised
watch-logs: retry streaming if it blows up
print out director/nats tunnel URIs