update deps and add npm-shrinkwrap.json