Locking refresh of credentials.
node v0.10.x is required
Merge pull request #34 from mapbox/cred-refresh

Locking refresh of credentials