moved npm install around