Update js-yaml dep

See https://nodesecurity.io/advisories/JS-YAML_Deserialization_Code_Execution
Merge branch 'pdehaan-patch-1'
Modernizing: updating the vows dependency and getting rid of some coffee-script.