Update package.json

Don't think underscore v1.5.3 is quite out there yet...