Temporarily use vows URL in package.json

Update to the epsilon() API was introduced, but no planned release date
for the change. To accomidate that the remote URL for the tar.gz has
been used in order to manually pull down latest master.

This commit SHOULD be reverted as soon as vows has released an update.