The recents collection was not being updated upon "unfavoriting" like it was for other actions

Fixes #557

Also fixes BBQ122
Merge pull request #560 from SpiderOak/issue-557-recents-not-reflecting-changed-fave-status

issue 557 recents not reflecting changed fave status
Unmask btoa-breaking UTF8 chars in password test

And correct a comment typo.
Upgrade to cordova 3.5, and settle incidental issues.

This commit addresses three concerns:
- Upgrade cordova to 3.5.0
- but upgrade cordova android to 3.5.1, to account for security issues -
  (see http://cordova.apache.org/announcements/2014/08/04/android-351.html)
- work around bug in older bower which causes initial npm install to
  fail, by going to more recent bower version.

I will next need to simplify BrandPackage.js a bit, to ensure it
sustains the particular cordova versions we specify.
Add the specified platforms, rather than only those that were removed.

This way we can ensure that the platform versions are as specified.

We'll need to remember to track the version specifiers in this script,
or remove them, as the version discrepancies (for the security advisory
- http://cordova.apache.org/announcements/2014/08/04/android-351.html)
are over.
Merge pull request #565 from SpiderOak/cordova-and-incidental-updates

Cordova and incidental updates
Unpinned the Cordova plugins, including the File* ones

Mostly this has required changing from using `fileEntry.fullPath` to `fileEntry.toURL()`

Updates were needed for the FileViewerPlugin as well. These are currently in a branch called "update-to-3.5.x". This branch of the plugin is needed to test these changes.
Re-pin the plugins at their current version.

... so that they don't change until we're ready to change our cordova
version.
Remove superfluous comma.
Merge pull request #566 from SpiderOak/issue-472-update-cordova

Issue 472: Update Cordova
Rectify plugremove order dependency; remove unnecessary version numbers.
Merge pull request #567 from SpiderOak/fix-plugremove

Rectify plugremove order dependency; remove unnecessary version numbers.
Incorporate our fork of the cordovaHTTP plugin.

Make sure that uninstall of the cordova file plugin is after everything
else - a couple of things depend on it, including teh cordovaHTTP plugin.
Incorporate cordovaHTTP, when present.

Integrated with the alternateAjax provisions, and with fallback to
$.ajax if cordovaHTTP is not present. Specifically:

1. Prefer "alternateAjax" function designated in settings, if any.
2. Otherwise, use cordovaHTTPAjax if present - it depends on the cordovaHTTP
   plugin.
3. Otherwise, use $.ajax.
4. There is no 4.

Since we fallback to $.ajax, the tests will still work on the desktop.
Whoops, missed a small comment edit.
Rectify spiderOakApp.ajax() docstring typo and clarify the text.
Notify users that mobile app logins are not ZK.

They are notified of this every time they try until the first time elect
to continue, and then they are not notified again.

The notification happens before their credentials are sent.
Use "Zero-Knowledge" per emerging convention.

Also, streamline some phrasing.
Twiddling.
Is done.