add npm-shrinkwrap.json cachebusting
redirect npm install's stderr to stdout
Merge pull request #58 from heroku/shrinkwrap

:shipit: