fix deploy step

adjust env set order.
REV: use npm-shrinkwrap to limited npm version