Pin down version of socket.io

1.0 breaks.
Thanks to @jwedding.