added flags to npm install to disallow symlinks