Add package.json, don't reject unauthorized cert...