fixed some security policies that're new in ember-cli
update to canary ember-data for some async fixes