Lock down version of npm. <2.0 won't install a package from a file path, 2.1.10 somehow leaves out some directories when populating node_modules/ghost from git (which we want to play nicely with)