Clone query object when present.

Fixes #6.
I replaced underscore with lodash which has a nice `cloneDeep` method. The API is still the same as underscore so all tests pass.