upgrade to new png.js

got some pull reqs merged into png.js so we dont have to vendor it anymore