Fix shebang line. This script is portable and does not require bash
which may not be installed on all systems.
don't rely on bash being present: use posix semantics when possible
Allow tooltip.showTooltip to either be called with a reference DOM element or text and an anchor.
if PERSONA_WITH_COVER, do a graceful shutdown so cover can generate .coverage_data
when handline /.well-known/browserid bail out if config proxy_idps is not available; and tests for that
package.json: upgrade to bcrypt-0.7.3

Upstream says this fixes a memory issue.
automated tests readme updates
upgrade to awsbox 0.3.4
Merge pull request #2893 from mozilla/2892-new-bcrypt

package.json: upgrade to bcrypt-0.7.3
Merge pull request #2911 from mozilla/awsbox_upgrade

upgrade to awsbox 0.3.4
Merge pull request #2808 from jrgm/fix-coverage-for-static-daemon

if PERSONA_WITH_COVER, do a graceful shutdown so cover can generate .coverage_data

close #2807
catch urls that express cannot handle and return 404
Merge pull request #2764 from shane-tomlinson/issue_2762_show_tooltip_with_text

Allow tooltip.showTooltip to either be called with a reference DOM element or text and an anchor.

close #2762
Merge pull request #2890 from zaach/issue_2887_500_urls

catch urls that express cannot handle and return 404

close #2887
delete staged entries when canceling an Account

fixes #2919
Merge pull request #2923 from seanmonstar/2919-cancel-account-with-staged

delete staged entries when canceling an Account
update to latest jschannel that includes origin in notifications
Allow logout to be called before .request or .watch.

A slightly simpler solution to #2529 which pushes the majority of the logic into communication_iframe/start.js
implement configurable blocking of requests when the server is too busy: issue #2722
loadgen fixes and improvements:
  * defend against double callback invocation in wsapi_client for network errors
  * display average request latency in loadgen output
  * fix unhandled exception when cert_key API fails
  * handle 503 errors at any point, not just in auth responses.