upgrade NSS, make work on OS X and bump version