Readd sha.js

It apepars sha.js was removed from the package.json in 12d79a35a6bf0b93fa6aabe4481d4b6e5502b7e3
This is causing everything to asplode.  Fixes #73