fix Mocha timeout
bump deps