update fxa client to handle timeskew

Includes APIs needed by @shane-tomlinson in #254

Plus, no more invalid timestamps.

Supersedes #298