move valid email checks to local tests
Merge pull request #818 from dannycoates/master

basket api notifier
train-22
Merge pull request #815 from jrgm/local-email-valid

move valid email checks to local tests
Pass 'log' and 'config' as options to the scrypt module.
Make scrypt.maxPending a config option.

This also renames some internal uses of "max_pending" to match the
prevailing capitalization style.
Periodically log statistics on scrypt queue backlog.
Log a warning when scrypt.maxPending limit is exceeded.
Refactor stat reporting to use opaque methods on each service.
Merge pull request #819 from mozilla/rfk/config-scrypt-backlog

Improve operational affordances for scrypt max-pending limit
Fixes #799 - Adds tests for customs.js which hits the fxa-customs-server
Update shrinkwrap
Merge pull request #821 from chilts/i799-tests-for-customs-server

Fixes #799 - Adds tests for customs.js which hits the fxa-customs-server
base64URL decode the sig of JWTs before verifying

The preverified token verifier was expecting the signature portion to be hex encoded, which is incorrect.
Fixes #823
Merge pull request #824 from mozilla/issue-823

base64URL decode the sig of JWTs before verifying
fixed #825 preverifytoken exp seconds
train-23
/account/destroy can throw an "incorrect password" error
Merge pull request #827 from fmarier/destroy_incorrect_password

/account/destroy can throw an "incorrect password" error