Update browserid-local-verify dependency.

This in turn updates browserid-crypto to its latest version,
which removes support for "new format" certificates, hence the
version bump.