tie to specific derby version for npm 2.0 compatibility