rm README deps section, use package.json instead
orderingtoBits should return exact number of bits

This caused an occasional test failure in the
"hide and extract" test depending on the
ordering chosen and the random padding.
Added a new test that consistently fails for
this issue, then fixed the issue.