pin watchify version for node 0.8 support

Wasn't sure if we care whether our build system breaks on node 0.8
at this point, but that seems to be the message in travis, which I
traced back to watchify introducing a dependency on chokidar.