fix User.updateOrCreate by updating underscore (_.pick wasn't working)
waterline and underscore are real dependencies