added npm-shrinkwrap to lock dependencies on deploy