Use peerDependencies for Winston

This should be a best practice for plugin projects. See http://blog.nodejs.org/2013/02/07/peer-dependencies/.