Thread-safety fix in CBLWebSocketChangeTracker

I haven’t seen this cause problems, but fixed it just in case.
Fixed another assertion-failure when a _bulk_get download can’t parse a JSON doc

Found a piece that was missing from the prior fix 24f6381. The same assertion failure was occurring,
under slightly different circumstances.
Fixes #288 (speculatively). Also see #271, #232.