selectively update dependencies to at least npm install working under 0.10.0
partial port to new jwcrypto