update readme
add npm shrinkwrap
bump dev dep