Run jshint fixes on all public js
Don't set connectedParticipants from bad session

Specifically: disallow setting connectedParticipants from users who have
the wrong hangout-url.  May be adequate to fix #280.

Also, do some more not-entirely-fruitful work on addressing test
inconsistency (#267).