use the newest fxa-js-client which fixes the problem with calling signIn with a non-existent user

partial fix for #489