add more robust custom config support:

[bucko13]

• verifier can now use the request object as a resource
• verifier and caveat getter are both async now to support async calls
• better documentation around custom configs