updating hapi and request (and a few others)

Tried to standardize the semver range operators in `devDependencies` (I went with `^`, but we can do `~` instead, @pdehaan don't care).

I also just did `$ npm shrinkwrap` and not `--dev` since we're using semver operators in `devDependencies`. If you want, we can remove the range operators in devDeps and I can re-shrinkwrap. /cc @jrgm

Fixes #115