Lock onto node and npm versions.

There's currently a bug with the latest version on node and npm.
See https://github.com/isaacs/npm/issues/3940 for details.