fix leaking globals

`util`, `events`, and `SlowBuffer` are leaked by `passport-ldapauth` and have been fixed upstream so can be removed after their next release. `Functions` and `Utilities` are leaked by `xpath.js` which is required by `passport-saml`, I've got a PR in at https://github.com/yaronn/xpath.js/pull/5 to fix them.