fixes for #12, #17, #26, and resolves dependabot vulnerabilities

[trevor-leach]

This contains work done by universalhandle and krishnagopinath The tests all pass using node 6 locally. My hope is that the combination of these PRs will pass the github checks too.