specify the right versions

never use latest for module dependencies as it gives issues with npm shrinkwrap