request as dependency instead of dev dependency