Update package.json

fixed dependency broken due to socket.io release (who would have thought they were releasing a new version anyway -_-)