updated README to reflect a process for managing NPM dependencies