update install instructions to use package.json