chore(build): Remove bower tasks
Remove "grunt-contrib-watch"
fix(test): Ensure requirejs configuration is loaded before any other scripts.

In main.js, both require_config and ./lib/app-start are requested at the same time. If app-start is loaded and parsed before require_config, then the shims for underscore and backbone are not defined.

fixes #1478
Merge pull request #1472 from vladikoff/remove-bower-tasks

chore(build): Remove unused tasks

I may be jumping the gun, but I cannot find any mention of bower aside from the two files you removed and grunt-contrib-watch wasn't even configured.

Thanks @vladikoff!

r+
Merge pull request #1479 from mozilla/issue-1478-requirejs-load

fix(test): Ensure requirejs configuration is loaded before any other scripts.
Revert "fix(test): Ensure requirejs configuration is loaded before any other scripts."
Merge pull request #1480 from mozilla/revert-1479-issue-1478-requirejs-load

Revert "fix(test): Ensure requirejs configuration is loaded before any o...
fix(csp): allow image sources from gravatar
Merge pull request #1473 from mozilla/csp-gravatar

fix(csp): allow image sources from gravatar
Remove npm spinner on Travis
styling links in the success messages
Merge pull request #1484 from pdehaan/travis-no-spin

Remove npm spinner on Travis
Merge pull request #1487 from pdehaan/issue-1486

styling links in the success messages

Looks great, thanks @pdehaan!
feat(oauth): message to native flows
refactor(client): Prepare for multiple channels.

* Channels are now ephemeral, no more storing channels on Session.
* Create a BaseChannel which is the root of all other Channels.
* Extract the current OAuth redirect code into its own channel named RedirectChannel.

* Use the channel's `send` interface to determine whether it supports OAuth auto-verification.
* Upon OAuth completion, display a spinner on the available submit button.
* Upon OAuth completion, if no response is received from the channel within 10 seconds, display an error message.

* Mock in some OAuth server interactions to allow for more unit test coverage.
* Remove the @vladikoff's FxWebChannel for now to simplify review. I will add this in a separate PR.
Add the iframe channel, use the iframe channel if iframed.

* Add a close button in the content.
* Start the shell of a CancelButtonView.
* allow /oauth/signin & /oauth/signup to be framed.
* The iframe does an ack/nack with the parent window to determine origin, only whitelisted origins can be iframed.
* Non-whitelisted origins are sent to the `/illegal_iframe` endpoint.
* Start on an OAuth RP include.js with a callback based API.
* Add a check in env-test to determine whether the user is in an iframe.
* Hook up the close button if iframed.
Some cleanup.

* Add more iframe channel tests to ensure sufficient coverage.
* In the RP, a ping should respond with the exact same message that it received.
* Always start the closeButtonView.
* Add the ability to force allow all origins.
Add the GET /iframe_allowed endpoint, hook that up to the front end. This allows for the full check of whether an iframe is allowed for an origin.
Mock in the /iframe_allowed endpoints for testing.