bower 1.3.3 -> 1.3.6, and new npm-shrinkwrap.json

"fixes" #1346 on the train-16 branch

@zaach, @vladikoff r?