update npm in a way that doesn't fail