bin/npm: redirect stderr only to fix `npm login`