Update underscore dependency

Everything seems to work with 1.4 as far as I can see - all tests pass apart from one which seems to be caused by mikeal/request#459.