_.defaults only overrides `undefined` values

As discussed in https://github.com/documentcloud/backbone/pull/2264, `null` is a valid JSON and database value and actually means "nothing" whereas `undefined` means "has yet to be set to a value, whatever it may be". I feel this patch results in the expected behavior.