bump app-validator: add new "mobilenetwork" permission for privileged apps
stop sending pinning cookies (bug 870368)
don't use auth.login in the api (bug 870368)