Locking down js-routes version