Revert "bump sinon"

This reverts commit 78c041f339b59be35fcc8d5c7a94935ffe31ce45.
update sinon and have npm fixup package.json