use latest SSDP library, lock in package versions

Using the latest SSDP node library solved a lot of device discovery issues for me