Clean-up indirect dependencies (nytimes#226)

sarama was causing some other indirect dependencies. Upgrading it fixes
the issue.

We now have 3 indirect dependencies listed in go.mod:

- github.com/go-logfmt/logfmt
- github.com/go-stack/stack
- gopkg.in/jcmturner/goidentity.v3

go-kit accounts for the first two and sarama for the last one. Since
sarama does support go modules, this may be something missing on their
side.

go.mod: update ocagent to fix incorrect pseudo version (nytimes#225)

* go.mod: update ocagent to fix incorrect pseudo version

* update stackdriver

[server] Avoiding Prometheus memory bomb when using the new stdlib ro…

…uter (nytimes#223)

* no longer using prom instrumentation if using the stdlib router

* docs and downhill updates

[server] fixing stdlib router 😅 (nytimes#222)

* adding tests to fix stdlib router in server bc we shouldve done it from the start

* better test error msgs

adding a stdlib router to use in the server package (nytimes#221)

Adding log levels to kit/server.Log*Msg funcs (nytimes#220)

* adding log levels to kit/server.Log*Msg funcs. resolves nytimes#13

* adding warn and debug loggers, updating docs

* adding tests

[observe] Adding RegisterAndObserveGCP to use within the SimpleServer…

… (or any non-sever/kit poject)) (nytimes#217)

* adding RegisterAndObserveGCP func to use within gizmo/server

* adding onError, fixing compile errors

* adding more beef to docs

* putting the GAE check first

* adding observe.SkipObserve?

* hooking into logger too

* preventing a breaking change, NewLogger should still fall back to JSON on error and no skip is set

[server/kit] adding Google profiler if environment is GCP enabled (ny…

…times#214)

[auth] adding VerifyRequest for use within http middlewares (nytimes#213

)

* [auth] adding VerifyRequest for use within http middleware

* drying up a tad

falling back to PORT env variable if HTTP_PORT is not set (nytimes#212)