upgrade oasis 
- remove allow-same-origin
- configurable async callbacks (we should now be able to wrap all oasis next-turns in run loops)
  `Oasis.configure('eventHandler', function (callback) { callback(); });`

- improved error messages when requestHandlers only return undefined (as this is almost always an error)
- bail out of sandbox initialization if in phantomJS as this is not yet supported