minimum change to fix #422 memory leak. new issue #426 for the rest
Merge pull request #428 from mozilla/dc/nonce

Fixed nonceCheck type conversion bug
updated hapi
removed callbacks from client lib
Merge pull request #430 from dannycoates/decallback

removed callbacks from client lib
expose timestamp header to clients that use CORS
Merge pull request #431 from zaach/expose-timestamp

expose timestamp header to clients that use CORS