Pinning underscore in bower to match the backend package.json