update deps

The version of underscore we were on is missing _.object