added npm-shrinkwrap to guarantee we're all on the same page dependency-wise