REV: use npm-shrinkwrap to limited npm version

socket.io update to 1.0, it is incompatible with current cantas.