Update package.json

Using https git urls in dependencies to make this work from behind corporate firewall.