defaults; non-SSL registry, local opt package.json

this patch gets local to behave the same way it did for node 0.10.x as it did for 0.8.x