We trust `npm` now.

  This means we'll not have hacks with git submodules.
  Fixed name of NPM config file.