Specify underscore & underscore.string dependencies

The versions are based on the latest compatible version that underscore.string supports.
change @http to @robot.http to remove deprecation notice
Merge pull request #944 from nickhammond/patch-2

Specify underscore & underscore.string dependencies