lockdown dependencies

Tests were failing with should@3.1.3. So lockdown all dependencies just to be safe.
bump version number to 0.2.1