pin to node-http-proxy 1.4

while I figure out what's up with 1.5