Sub yarn for npm to pull dependencies

As @eread noted here, yarn install is faster, and does not bother with a package-lock.json file (which we don't use).

I've also reordered the steps slightly, to make sure readers install yarn before running yarn install.