put all npm dependencies in package.json and version lock

We have found that version-locking NPM dependencies makes maintaining our licode servers a lot easier.