punycode: update to v1.2.0

This update adds support for RFC 3490 separators for improved
compatibility with web browsers.
http: fix duplicate var initialization

IncomingMessage function contained duplicate initialization
of this._pendings. Line with one of those expressions has been
removed.