update to awsbox 0.5.4 - mitigates #3899
Merge pull request #3901 from mozilla/awsbox-upgrade-0.5.4

update to awsbox 0.5.4 - mitigates #3899
Update vows to fix Selenium on node 0.10.x

The fix is outlined by @jrgm in https://github.com/mozilla/browserid/issues/3895#issuecomment-24714443

fixes #3895
Merge pull request #3900 from mozilla/issue-3895-update-vows

Update vows to fix Selenium on node 0.10.x
always decode returnTo before redirect

fixes #3903
Merge pull request #3906 from seanmonstar/dont-encode-returnto

always decode returnTo before redirect
update awsbox to 0.6.0, fixes #3899, fixes #3851
Merge pull request #3908 from mozilla/awsbox-0.6.0

update awsbox to 0.6.0, fixes #3899, fixes #3851
Remove npm package from Ubuntu setup instructions.

npm has since been included in nodejs [for quite some time](http://blog.nodejs.org/2011/11/25/node-v0-6-3/).
Add make package to Ubuntu setup instructions.

(Was missing from a minimal Ubuntu system.)
Merge pull request #3910 from djmaze/patch-1

Update Ubuntu setup instructions
tests/post-limiting-test.js modified
mitigate change in iOS7 privacy behavior - no longer logout users upon reload - issue #3905
Merge pull request #3914 from mozilla/ios7-quickfix

mitigate change in iOS7 privacy behavior - no longer logout users upon reload
Adding one universal logger - everything goes through winston.

* Add a file transport
* Add a statsd transport
* Add a heka transport

All logging except for cef logging goes through these. statsd stats go through these.
Add a stats.setupMiddleware function to reduce duplicate code in each of the processes.
Fix certs being requested from the fallback IdP for addresses supported by primary IdPs.

`type` has not been stored on email address information that is stored in localStorage for many months. User.getAssertion was not updated. Instead of looking at the address info stored in localStorage, User.addressInfo must be called instead, and the information fetched from the backend.

* Update the getAssertion tests to remove the `type` field when calling storage.addEmail
* Update user.getAssertion to get an email type from the information returned from User.addressInfo

Partial fix for Bugzilla #912001
fixes #3625
No longer provision a user with their IdP on every call to user.addressInfo.

User.isUserAuthenticatedToPrimary was only called by User.addressInfo and can safely be removed.

Fix the re-provisioning on every page load mentioned in Bugzilla #912001
Update the Changelog for train-2013.09.25
Bump Version to 2013.10.09