Locked package versions for tower packages and new app packages

I've locked the package versions in the tower source to make it easier for new contributors to setup when they link tower.