Update package.json

* add `npm dedupe` as a postinstall step
* pin some dependencies
* use a version of `webmaker-auth-client` that doesn't require bower
* add `supervisor` as a dependency
* add `npm start` script