lock bower version of steroids-js to what is preinstalled in www/components