Swap out node-sass for sass to fix tar vulnerability

Until sass/node-sass#2625 is fixed node-sass will have a high-severity vulnerability in its transitive `tar` dependency. The alternative `sass` package works fine for our situation and even installs faster, without the `node-gyp` download.

Author: Oblosys