pin dependencies and add destroy function for .wait

* updated package.json to pin dependencies (floating dependencies will cause issues in the future)
* return a `destroy` function from `.get` and `.wait` requests to kill pending requests
* add tests for wait destroy
Possibly. `.end` seemed to work and cleanly stops the request. Can change to `.abort()` if we think that behavior is better.