Shrinkwrap

Addresses #233 

While it's technically ready for merging, I'd like to discuss how to make it a regular part of deployment instead of having to remember to remove/remake npm-shrinkwrap.json every time. (Because humans are forgetful creatures :-P)