update to use npm-registry-client 2

The new npm-registry-client requires that each call include the actual registry to which it's calling, either as a formatted package URL, or as a base registry URL.