Use spawn with a shell to get best of both worlds

This should prevent a re-appearance of issue #1
while giving us shell expansion and globbing

npm test runs without errors
I haven't tested on Windows