using http to get to npmjs instead of https in order to avoid certificate (UNABLE_TO_VERIFY_LEAF_SIGNATURE) problem

- also improved logging while at it
0.2.5 uses http to talk to npmjs.org instead of https to fix certificate issue