Explicitly add validator

Validator is included by anchor, which is included by
waterline.  Since we use validator directly, add it into
our package.json to prevent any run away errors.