Update package.json

Setting lodash dependency call to "https" instead of "git" to prevent firewalls' blocking issues.