Move dependencies to vendor path

[magiconair]

Go 1.6 is around the corner and the dependencies should move from _third_party to vendor. I'll give the govendor tool a try for the heavy lifting.