lock it all down!

- set our dependencies firmly
- lock them down
- include lockdown.js so it cant be poisoned
Merge branch 'master' into HEAD

Conflicts:
	package.json
Update lockdown
Tweaks to make scripts/lockdown.js pass jshint
Merge pull request #41 from callahad/lockdown

lock it all down!