jharting add explicit moment dependency to workaround https://nodesecurity.io/… …