locking in dependencies for grunt 3.0