external deps are not parsed

updates substack/node-browserify#401

I think this is the expected behavior for external dependencies.
We do no want their dependencies bundled, as they are with the external.

This patch adds external deps to _noParse, preventing their deps from
being included. It allows an option `parse` to be passed into `external()`,
in case someone is currently relying on the old behavior.