upgrade when.js and fix revoked-ssl check (bumping to 2.5.1)