Revert "remove explicit npm dependency"

This reverts commit feab2b5b394ca998336ba4aa0864b7d6d601f545.

turns out that, even though node 0.8 comes with npm, the .deb doesn't
include it