publishing private packages won't work with npm 1.3.19+

[rlidwka]

npm changed the way it is publishing packages in this commit:
npm/npm-registry-client@e9fbeb8

Sinopia will have to be changed accordingly. Also, now tarballs will now be encoded in the same big json document, say "hello" to out-of-memory kind of things. :(