Fix router test

Upgrade test dep underscore to 1.5.2 and fix an old form of `_.bindAll` in the router test to explicitly pass method names.