add RSVP to bundledDependencies

after this mornings incident i realized RSVP was not being bundled. Although it was good to catch the bug early, we should likely keep our dependencies bundled and locked down to ensure stability + faster npm downloads