add shrinkwrap; npm shrinkwrap --dev
omit "canvas" from npm-shrinkwrap.json
Merge pull request #54 from jrgm/add-shrinkwrap

add shrinkwrap; npm shrinkwrap --dev
Switch to convict for config

Other projects of ours like fxa-auth-server and fxa-customs-server use convict,
so this is a little more consistent.
Update shrinkwrap