Nat check not working after move to appengine

[isdal]

Nat check requires the update server to issue a separate request back to the client. Appengine has no raw sockets so to make this work we need to set up a separate server just for nat check.

[willscott]

We might consider using STUN, which has emerged as a standard-ish way to do nat characterization