remove npm auto-update for underscore.js

see: https://github.com/jashkenas/underscore/issues/1839