workaround http://blog.npmjs.org/post/78085451721/npms-self-signed-certificate-is-no-more